renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "mergeConfidence:all-badges",
    "config:recommended",
    ":dependencyDashboard",
    ":semanticCommits",
    "helpers:pinGitHubActionDigests"
  ],
  "includePaths": [
    "Cargo.toml",
    "Cargo.lock",
    "tools/license-headers/Cargo.toml",
    "xtask/Cargo.toml",
    "package.json",
    "package-lock.json",
    "rust-toolchain.toml",
    ".nvmrc",
    "renovate.json",
    ".github/workflows/**",
    ".github/actions/**"
  ],
  "addLabels": ["dependencies"],
  "automergeType": "branch",
  "platformAutomerge": true,
  "gitIgnoredAuthors": ["github-actions[bot] <github-actions[bot]@users.noreply.github.com>"],
  "prConcurrentLimit": 5,
  "prCreation": "not-pending",
  "rangeStrategy": "bump",
  "minimumReleaseAge": "3 days",
  "vulnerabilityAlerts": {
    "enabled": true,
    "labels": ["security"],
    "automerge": false,
    "minimumReleaseAge": null
  },
  "osvVulnerabilityAlerts": true,
  "customManagers": [
    {
      "customType": "regex",
      "managerFilePatterns": ["/(^|/)rust-toolchain\\.toml$/"],
      "matchStrings": ["channel\\s*=\\s*\"(?<currentValue>[^\"]+)\""],
      "packageNameTemplate": "rust-lang/rust",
      "depNameTemplate": "rust",
      "datasourceTemplate": "github-tags",
      "versioningTemplate": "rust-release-channel"
    },
    {
      "customType": "regex",
      "managerFilePatterns": ["/(^|/)\\.github/workflows/release\\.yml$/"],
      "matchStrings": ["tool:\\s*cargo-about@(?<currentValue>[0-9][^\\s\"]*)"],
      "depNameTemplate": "cargo-about",
      "datasourceTemplate": "crate"
    }
  ],
  "lockFileMaintenance": {
    "enabled": true,
    "schedule": ["before 6am on monday"],
    "automerge": true,
    "automergeType": "branch",
    "platformAutomerge": true
  },
  "packageRules": [
    {
      "description": "Rust toolchain updates require testing",
      "matchDatasources": ["rust-version", "github-tags"],
      "matchDepNames": ["rust"],
      "enabled": true,
      "automerge": false,
      "groupName": "Rust toolchain",
      "labels": ["dependencies", "rust-toolchain"],
      "minimumReleaseAge": "30 days"
    },
    {
      "description": "Automerge minor Rust toolchain updates after release age",
      "matchDatasources": ["rust-version", "github-tags"],
      "matchDepNames": ["rust"],
      "matchUpdateTypes": ["minor"],
      "automerge": true,
      "groupName": "Rust toolchain",
      "labels": ["dependencies", "rust-toolchain"],
      "minimumReleaseAge": "30 days"
    },
    {
      "description": "Only update engines field for major Node.js versions",
      "matchDepTypes": ["engines"],
      "matchPackageNames": ["node"],
      "matchUpdateTypes": ["minor", "patch"],
      "enabled": false
    },
    {
      "description": "Automerge non-major updates after release age",
      "matchUpdateTypes": ["minor", "patch"],
      "automerge": true
    },
    {
      "description": "Group all Rust workspace dependencies",
      "matchManagers": ["cargo"],
      "matchDepTypes": ["workspace.dependencies"],
      "groupName": "Rust workspace dependencies"
    },
    {
      "description": "Group Rust dev dependencies",
      "matchManagers": ["cargo"],
      "matchDepTypes": ["dev-dependencies"],
      "groupName": "Rust dev dependencies",
      "automerge": true
    },
    {
      "description": "Security updates have priority and shorter release age",
      "matchDepTypes": ["dependencies"],
      "matchCurrentVersion": "!/^0/",
      "matchUpdateTypes": ["patch"],
      "matchPackageNames": ["*"],
      "minimumReleaseAge": "1 day",
      "labels": ["dependencies", "security-patch"]
    },
    {
      "description": "GitHub Actions updates enabled with caution",
      "matchManagers": ["github-actions"],
      "enabled": true,
      "groupName": "GitHub Actions",
      "automerge": false,
      "minimumReleaseAge": "7 days"
    },
    {
      "description": "Major updates require manual review",
      "matchUpdateTypes": ["major"],
      "automerge": false,
      "labels": ["dependencies", "major-update"]
    },
    {
      "description": "Group Node.js updates together (.nvmrc, Dockerfiles) - LTS only",
      "matchDatasources": ["node-version", "docker"],
      "matchPackageNames": ["node"],
      "allowedVersions": "/^\\d*[02468]\\../",
      "groupName": "Node.js",
      "groupSlug": "node"
    }
  ]
}